クリプトータス

Cryptortoise

Plug in your FIDO2 key to unlock everything.
Pull it out to lock everything.

Hardware-key-based directory encryption for Linux. Zero passwords. Ever again.

⬡

No Passwords

Your FIDO2 hardware key derives encryption keys on demand. Nothing to remember. Nothing to leak.

⟐

Magnetic Snap

Magnetic USB-C connector. Snap on to unlock. Pull off to lock. Walk away and your data seals itself.

◈

One Key. Done.

A single hardware key replaces all your passwords. Pre-flashed and ready to plug in.

仕組み

How It Works

KEY PLUGGED IN

USB detected

▼

FIDO2 HMAC key derived

▼

gocryptfs mounts vaults

▼

Symlinks restored

▼

UNLOCKED

KEY REMOVED

USB removal detected

▼

Keys wiped from memory

▼

gocryptfs unmounts

▼

Symlinks removed

▼

LOCKED

機能

Features

🔒

Directory Encryption Encrypt any directory with hardware-derived keys via gocryptfs

🌐

Browser Protection Encrypt Brave, Firefox, and LibreWolf profiles transparently

⚙

App Config Encryption Protect Discord, Steam, and other app configs with one command

🔑

Credential Vault Store passwords encrypted at rest with your FIDO2 key

🛡

Software Passkeys Track and manage FIDO2 passkeys across sites

⚡

System Tray Daemon Auto-locks on key removal, auto-unlocks on insertion

📁

File Manager Integration Right-click encrypt/decrypt in Nautilus, Nemo, Caja, Dolphin, Thunar

🧩

Browser Extension Autofill credentials and manage passkeys in Brave/Firefox

🚪

PAM Integration Unlock encrypted vaults automatically at login

⚡

Setup Wizard Guided first-run configuration with GTK4 UI

対応アプリ

Supported Apps

Brave

Browser

Full profile — history, passwords, cookies, extensions

Firefox

Browser

Full profile — logins, bookmarks, session data

LibreWolf

Browser

Full profile — privacy-first Firefox fork

Discord

Chat

Config, tokens, cache

Steam

Gaming

Config, saved credentials, VDF files

GNOME Keyring

System

Stored passwords and secrets

Proton Mail

IMAP/SMTP credentials, config

Any Directory

Custom

cryptortoise encrypt <path> works on anything

手に入れる

Get Yours

CRYPTORTOISE KEY

$30

Pre-flashed. Tested. Plug in and go.

FIDO2 hardware key with firmware pre-loaded
Magnetic USB-C snap connector — just snap on to unlock, pull off to lock
540° rotating swivel, 480Mbps data, 240W passthrough
Tested & verified before shipping
Setup support from the developer

Buy on Ko-fi →

Ships worldwide. No account required.

Buy the key Pre-flashed, ready to use out of the box

Install the software sudo apt install cryptortoise or: dnf install cryptortoise • yay -S cryptortoise • manual install

Plug in & run setup cryptortoise setup

Advanced: Build your own key

Cryptortoise is open source. If you want to source and flash your own hardware:

Get a Raspberry Pi Pico (~$5)
Flash Pico FIDO firmware (UF2)
Install Cryptortoise from GitHub

Any FIDO2 key with hmac-secret support works (YubiKey 5, SoloKeys, Nitrokey).